Static task
static1
Behavioral task
behavioral1
Sample
65c7de2081780eff42f27bda720cb8ad_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65c7de2081780eff42f27bda720cb8ad_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65c7de2081780eff42f27bda720cb8ad_JaffaCakes118
-
Size
960KB
-
MD5
65c7de2081780eff42f27bda720cb8ad
-
SHA1
69ccf8c005c2aa2483f71efff881f10ee0903882
-
SHA256
593c3ffc4e4bcbf52926bbe61bd4391a0757d0808614e4eb764c7503422926c9
-
SHA512
1a371712aed135fec9d4386df86a83b2204d55e1f082bd0732892abbe67c314ca65bedbafa8355a05d3c366e1b5d03a99d0bf2f531b885ca604312f5a80a2472
-
SSDEEP
12288:rh1FC/91+/yD8frzoTCZk2gqcceOgNut5hyIY/LHnMsrZ/qGgC8KzSq0WDjCR67M:dbM1+VfjZviapMMkNqGgC8QhDjCQpi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65c7de2081780eff42f27bda720cb8ad_JaffaCakes118
Files
-
65c7de2081780eff42f27bda720cb8ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
aaa0 Size: 420KB - Virtual size: 420KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aaa1 Size: 521KB - Virtual size: 521KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.snaker Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE